@wrongstack/core 0.277.0 → 0.277.2

package/dist/index.js

@@ -29606,19 +29606,51 @@ var LruCache = class {
 // src/security/permission-policy.ts
 init_safe_json();
 init_tool_subject();
-var DESTRUCTIVE_BASH_PATTERNS = [
-  /\bgit\s+(?:clean\s+-[^\s]*[xdf]|reset\s+--hard)\b/i,
-  /\b(?:drop|truncate)\s+(?:table|database|schema)\b/i,
-  /\bdelete\s+from\b/i,
-  /\b(?:mkfs|format|diskpart|shutdown|reboot)\b/i,
-  /\bchmod\s+-R\s+777\b/i,
-  /\bchown\s+-R\b/i,
-  /\b(?:curl|wget)\b.*\|\s*(?:sh|bash|zsh|pwsh|powershell)\b/i,
-  /\b(?:powershell|pwsh)\b.*(?:-encodedcommand|-enc)\b/i,
-  /:\(\)\s*\{\s*:\|:&\s*}\s*;/
+var CATASTROPHIC_PATTERNS = [
+  /\b(?:mkfs(?:\.[a-z0-9]+)?|mke2fs|newfs)\b/i,
+  // make a filesystem — wipes a partition
+  /\bformat\s+[A-Za-z]:/i,
+  // format C: — wipes a Windows volume
+  /\bdiskpart\b/i,
+  // Windows partition editor
+  /\bdd\b[^|]*\bof=(?:\/dev\/|\\\\[.?]\\)/i,
+  // dd writing straight to a raw device
+  />\s*\/dev\/(?:sd|hd|nvme|disk|mapper|vd)/i,
+  // redirect into a raw block device
+  /:\(\)\s*\{\s*:\|:&\s*\}\s*;/
+  // classic fork bomb
 ];
-var PROJECT_ESCAPE_PATTERN = /(?:^|[\s"'])\.\.(?:[\\/]|$)/;
-var ABSOLUTE_PATH_PATTERN = /(?:^|[\s"'])(?:~[\\/]|\/[A-Za-z0-9_.-]|[A-Za-z]:[\\/])/;
+var CATASTROPHIC_POSIX_ROOTS = /* @__PURE__ */ new Set([
+  "/etc",
+  "/usr",
+  "/bin",
+  "/sbin",
+  "/lib",
+  "/lib64",
+  "/var",
+  "/boot",
+  "/dev",
+  "/sys",
+  "/proc",
+  "/opt",
+  "/root",
+  "/home",
+  "/srv",
+  "/run",
+  "/system",
+  "/library",
+  "/applications",
+  "/users"
+]);
+var CATASTROPHIC_WIN_SUBDIRS = /* @__PURE__ */ new Set([
+  "windows",
+  "system32",
+  "winnt",
+  "program files",
+  "program files (x86)",
+  "programdata",
+  "users"
+]);
 var SHELL_OPERATORS = /* @__PURE__ */ new Set(["&&", "||", "|", ";", ">", ">>", "<", "2>", "2>>"]);
 function getInputString(input, key) {
   if (!input || typeof input !== "object") return void 0;
@@ -29635,20 +29667,21 @@ function pathLooksInsideProject(rawPath, projectRoot) {
 function tokenizeShell(command) {
   return command.match(/"[^"]*"|'[^']*'|\S+/g)?.map((token) => token.replace(/^['"]|['"]$/g, "")) ?? [];
 }
-function pathTokenIsOutsideProject(token, projectRoot) {
-  if (!token || SHELL_OPERATORS.has(token) || token.startsWith("-")) return false;
-  if (token === "/" || token === "~" || token === "." || token === "..") return token !== ".";
-  if (token.includes("*")) return true;
-  if (token.startsWith("..") || token.includes("../") || token.includes("..\\")) return true;
-  if (path4.isAbsolute(token) || token.startsWith("~/")) return !pathLooksInsideProject(token, projectRoot);
+function isCatastrophicDeleteTarget(rawTarget) {
+  const t2 = rawTarget.replace(/^['"]|['"]$/g, "").trim();
+  if (!t2) return false;
+  if (t2 === "*" || t2 === "." || t2 === "./" || t2 === ".\\" || t2 === "./*" || t2 === ".\\*") return true;
+  const s = t2.replace(/[\\/]\*+$/, "").replace(/[\\/]+$/, "");
+  if (s === "") return true;
+  if (s === "~" || /^\$HOME$/i.test(s) || /^%USERPROFILE%$/i.test(s)) return true;
+  if (/^[A-Za-z]:$/.test(s)) return true;
+  const norm = s.toLowerCase().replace(/\\/g, "/");
+  if (CATASTROPHIC_POSIX_ROOTS.has(norm)) return true;
+  const win = norm.match(/^[a-z]:\/([^/]+)$/);
+  if (win?.[1] && CATASTROPHIC_WIN_SUBDIRS.has(win[1])) return true;
   return false;
 }
-function hasDangerousDeleteTarget(tokens, start, projectRoot) {
-  const targets = tokens.slice(start).filter((token) => !token.startsWith("-") && !SHELL_OPERATORS.has(token));
-  if (targets.length === 0) return true;
-  return targets.some((target) => pathTokenIsOutsideProject(target, projectRoot));
-}
-function hasDestructiveDelete(command, projectRoot) {
+function hasCatastrophicDelete(command) {
   const tokens = tokenizeShell(command);
   for (let i = 0; i < tokens.length; i++) {
     const token = tokens[i]?.toLowerCase();
@@ -29656,35 +29689,43 @@ function hasDestructiveDelete(command, projectRoot) {
     if (token === "rm") {
       const args = tokens.slice(i + 1);
       const recursiveOrForce = args.some(
-        (arg) => /^-[^-]*[rf]/i.test(arg) || arg === "--recursive" || arg === "--force"
+        (arg) => /^-[^-]*[rf]/i.test(arg) || arg === "--recursive" || arg === "--force" || arg === "--no-preserve-root"
       );
-      if (recursiveOrForce && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+      if (!recursiveOrForce) continue;
+      const targets = args.filter((arg) => !arg.startsWith("-") && !SHELL_OPERATORS.has(arg));
+      if (targets.length === 0) return true;
+      if (targets.some(isCatastrophicDeleteTarget)) return true;
+    }
+    if (token === "remove-item" || token === "ri") {
+      const args = tokens.slice(i + 1);
+      const recursive = args.some((arg) => {
+        const a = arg.toLowerCase();
+        return a === "-recurse" || a === "-force";
+      });
+      if (!recursive) continue;
+      const targets = args.filter((arg) => !arg.startsWith("-") && !SHELL_OPERATORS.has(arg));
+      if (targets.some(isCatastrophicDeleteTarget)) return true;
     }
     if (token === "rmdir" || token === "rd") {
       const args = tokens.slice(i + 1);
       const recursive = args.some((arg) => arg.toLowerCase() === "/s");
-      if (recursive && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+      if (!recursive) continue;
+      const targets = args.filter((arg) => !arg.startsWith("-") && !arg.startsWith("/") && !SHELL_OPERATORS.has(arg));
+      if (targets.some(isCatastrophicDeleteTarget)) return true;
     }
     if (token === "del" || token === "erase") {
-      if (hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
-    }
-    if (token === "remove-item") {
-      const args = tokens.slice(i + 1).map((arg) => arg.toLowerCase());
-      const recursiveOrForce = args.includes("-recurse") || args.includes("-force");
-      if (recursiveOrForce && hasDangerousDeleteTarget(tokens, i + 1, projectRoot)) return true;
+      const args = tokens.slice(i + 1);
+      const targets = args.filter((arg) => !arg.startsWith("-") && !arg.startsWith("/") && !SHELL_OPERATORS.has(arg));
+      if (targets.some(isCatastrophicDeleteTarget)) return true;
     }
   }
   return false;
 }
-function isClearlyDestructiveBashCommand(command, projectRoot) {
+function isClearlyDestructiveBashCommand(command, _projectRoot) {
   const trimmed = command.trim();
   if (!trimmed) return false;
-  if (hasDestructiveDelete(trimmed, projectRoot)) return true;
-  if (DESTRUCTIVE_BASH_PATTERNS.some((pattern) => pattern.test(trimmed))) return true;
-  if (/\bcd\s+(?:\.\.|~|\/|[A-Za-z]:[\\/])/i.test(trimmed)) return true;
-  if (PROJECT_ESCAPE_PATTERN.test(trimmed)) return true;
-  const absolute = trimmed.match(ABSOLUTE_PATH_PATTERN)?.[0]?.trim().replace(/^['"]|['"]$/g, "");
-  if (absolute && !pathLooksInsideProject(absolute, projectRoot)) return true;
+  if (hasCatastrophicDelete(trimmed)) return true;
+  if (CATASTROPHIC_PATTERNS.some((pattern) => pattern.test(trimmed))) return true;
   return false;
 }